UDP traffic
Datagrams matching asn:28573 sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
2.0K
Datagrams
145
Source addresses
1
Networks
1
Countries
178
Destination ports
Traffic by type
Service queries
12 datagrams from 1 sourceRequests a service answers without a handshake. Scanners send them to find open DNS, NTP, SNMP or SSDP servers, which are also the servers reflection attacks abuse.
Latest SNMP datagram, to 161/udp
payload bytes
00000000 30 26 02 01 00 04 05 41 64 6d 69 6e a1 1a 02 04 |0&.....Admin....| 00000010 23 a9 d9 3b 02 01 00 02 01 00 30 0c 30 0a 06 06 |#..;......0.0...| 00000020 2b 06 01 02 01 2b 05 00 |+....+..|
Other services
85 datagrams from 68 sourcesFirst packets of sessions with VPN, voice, tunnelling, database and management services.
Latest SOCKS5 datagram, to 33658/udp
payload bytes
00000000 05 00 ff ff 00 fe fe fe fe fd fd fd fd 12 34 56 |..............4V| 00000010 78 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |x...............| 00000020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
Unrecognised
102 datagrams from 83 sourcesDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 50480/udp
payload bytes
00000000 01 10 2c aa 97 d1 cf 79 89 00 ff ff 00 fe fe fe |..,....y........| 00000010 fe fd fd fd fd 12 34 56 78 de 08 aa 81 08 49 bc |......4Vx.....I.| 00000020 86 |.|
Peer-to-peer
1,801 datagrams from 11 sourcesFile-sharing clients trying to reach a peer that used one of these addresses before. This is not scanning, so it is left out of every other figure on this page.
Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
| Service | Port | Datagrams | Sources | Factor |
|---|---|---|---|---|
| SNMPv2 | 161/udp | 12 | 1 | 6.3 |
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Destination ports
Networks
- AS28573 Claro NXT Telecomunicacoes Ltda from 145 sources2,000
Countries
- BR Brazil2,000
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 177.140.104.35 | AS28573 Claro NXT Telecomunicacoes Ltda | BR | BitTorrent | 688 | 2026-10-09 22:30 |
| 187.39.118.69 | AS28573 Claro NXT Telecomunicacoes Ltda | BR | BitTorrent | 418 | 2026-10-11 05:06 |
| 179.223.203.112 | AS28573 Claro NXT Telecomunicacoes Ltda | BR | BitTorrent | 237 | 2026-10-10 09:06 |
| 191.177.175.0 | AS28573 Claro NXT Telecomunicacoes Ltda | BR | BitTorrent | 159 | 2026-10-09 09:55 |
| 177.82.218.228 | AS28573 Claro NXT Telecomunicacoes Ltda | BR | BitTorrent | 155 | 2026-10-08 01:05 |
| 191.177.175.168 | AS28573 Claro NXT Telecomunicacoes Ltda | BR | BitTorrent | 131 | 2026-10-11 00:55 |
| 189.55.118.218 | AS28573 Claro NXT Telecomunicacoes Ltda | BR | SNMP | 12 | 2026-10-08 12:22 |
| 189.6.238.21 | AS28573 Claro NXT Telecomunicacoes Ltda | BR | Unrecognised | 10 | 2026-10-10 17:44 |
| 186.207.253.190 | AS28573 Claro NXT Telecomunicacoes Ltda | BR | BitTorrent | 5 | 2026-10-10 01:16 |
| 191.183.39.113 | AS28573 Claro NXT Telecomunicacoes Ltda | BR | BitTorrent | 5 | 2026-10-06 21:35 |
| 177.82.130.191 | AS28573 Claro NXT Telecomunicacoes Ltda | BR | SOCKS5 | 4 | 2026-10-10 04:39 |
| 191.176.85.134 | AS28573 Claro NXT Telecomunicacoes Ltda | BR | SOCKS5 | 4 | 2026-10-11 03:30 |
| 189.34.0.222 | AS28573 Claro NXT Telecomunicacoes Ltda | BR | SOCKS5 | 3 | 2026-10-10 12:51 |
| 177.35.65.181 | AS28573 Claro NXT Telecomunicacoes Ltda | BR | Unrecognised | 3 | 2026-10-10 05:57 |
| 187.183.226.58 | AS28573 Claro NXT Telecomunicacoes Ltda | BR | SOCKS5 | 3 | 2026-10-08 14:45 |
| 191.177.192.199 | AS28573 Claro NXT Telecomunicacoes Ltda | BR | SOCKS5 | 3 | 2026-10-10 08:08 |
| 191.177.146.70 | AS28573 Claro NXT Telecomunicacoes Ltda | BR | Unrecognised | 3 | 2026-10-10 10:39 |
| 177.82.187.246 | AS28573 Claro NXT Telecomunicacoes Ltda | BR | Unrecognised | 3 | 2026-10-08 00:26 |
| 187.67.130.17 | AS28573 Claro NXT Telecomunicacoes Ltda | BR | Unrecognised | 3 | 2026-10-08 22:56 |
| 186.205.80.31 | AS28573 Claro NXT Telecomunicacoes Ltda | BR | SOCKS5 | 3 | 2026-10-10 13:12 |
Latest datagrams
payload bytes
00000000 05 00 ff ff 00 fe fe fe fe fd fd fd fd 12 34 56 |..............4V| 00000010 78 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |x...............| 00000020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| ... 512 bytes shown in part
payload bytes
00000000 01 10 2c aa 97 d1 cf 79 89 00 ff ff 00 fe fe fe |..,....y........| 00000010 fe fd fd fd fd 12 34 56 78 de 08 aa 81 08 49 bc |......4Vx.....I.| 00000020 86 |.|
payload bytes
00000000 01 f3 72 01 3a 6b a1 91 16 00 ff ff 00 fe fe fe |..r.:k..........| 00000010 fe fd fd fd fd 12 34 56 78 10 28 ff 5b 06 1d 02 |......4Vx.(.[...| 00000020 aa |.|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a fa b8 7c cd |d1:ad2:id20:..|.| 00000010 21 53 36 fa 86 2f e1 73 c3 59 93 57 bc 02 e3 ce |!S6../.s.Y.W....| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a fa b8 |9:info_hash20:..| 00000030 7e 79 bd 3d 7d a5 79 dc 2d b7 07 c6 ac 2b 73 0e |~y.=}.y.-....+s.| 00000040 13 b2 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |..e1:q9:get_peer| 00000050 73 31 3a 74 32 3a 52 bc 31 3a 76 34 3a 4c 54 01 |s1:t2:R.1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a fa b8 7c cd |d1:ad2:id20:..|.| 00000010 21 53 36 fa 86 2f e1 73 c3 59 93 57 bc 02 e3 ce |!S6../.s.Y.W....| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a fa b8 |9:info_hash20:..| 00000030 7a 14 b8 4c 66 d4 1b 54 27 1f 66 af c5 b3 64 b4 |z..Lf..T'.f...d.| 00000040 b3 68 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |.he1:q9:get_peer| 00000050 73 31 3a 74 32 3a 22 85 31 3a 76 34 3a 4c 54 01 |s1:t2:".1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a fa b8 7c cd |d1:ad2:id20:..|.| 00000010 21 53 36 fa 86 2f e1 73 c3 59 93 57 bc 02 e3 ce |!S6../.s.Y.W....| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a fa b8 |9:info_hash20:..| 00000030 7a 43 0f a8 b5 34 49 e8 9e f4 ec 4a 86 f4 62 29 |zC...4I....J..b)| 00000040 8d a1 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |..e1:q9:get_peer| 00000050 73 31 3a 74 32 3a d0 3c 31 3a 76 34 3a 4c 54 01 |s1:t2:.<1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a fa b8 7c cd |d1:ad2:id20:..|.| 00000010 21 53 36 fa 86 2f e1 73 c3 59 93 57 bc 02 e3 ce |!S6../.s.Y.W....| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a fa b8 |9:info_hash20:..| 00000030 7a 45 2a a8 5f ce bd eb de bf b1 3e a2 f8 be af |zE*._......>....| 00000040 5f 5a 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |_Ze1:q9:get_peer| 00000050 73 31 3a 74 32 3a 8d dd 31 3a 76 34 3a 4c 54 01 |s1:t2:..1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a fa b8 7c cd |d1:ad2:id20:..|.| 00000010 21 53 36 fa 86 2f e1 73 c3 59 93 57 bc 02 e3 ce |!S6../.s.Y.W....| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a fa b8 |9:info_hash20:..| 00000030 78 bc a2 8f 5c 27 87 e8 ae 49 89 d4 38 9b 22 82 |x...\'...I..8.".| 00000040 94 c4 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |..e1:q9:get_peer| 00000050 73 31 3a 74 32 3a ba d1 31 3a 76 34 3a 4c 54 01 |s1:t2:..1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 05 00 ff ff 00 fe fe fe fe fd fd fd fd 12 34 56 |..............4V| 00000010 78 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |x...............| 00000020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| ... 512 bytes shown in part
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a fa b8 7c cd |d1:ad2:id20:..|.| 00000010 21 53 36 fa 86 2f e1 73 c3 59 93 57 bc 02 e3 ce |!S6../.s.Y.W....| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a fa b8 |9:info_hash20:..| 00000030 7a a0 74 93 6b a8 d7 d2 82 8c 37 b5 31 1a bf 23 |z.t.k.....7.1..#| 00000040 fb fd 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |..e1:q9:get_peer| 00000050 73 31 3a 74 32 3a 69 98 31 3a 76 34 3a 4c 54 01 |s1:t2:i.1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a fa b8 7c cd |d1:ad2:id20:..|.| 00000010 21 53 36 fa 86 2f e1 73 c3 59 93 57 bc 02 e3 ce |!S6../.s.Y.W....| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a fa b8 |9:info_hash20:..| 00000030 7c 07 88 f8 9d d0 78 09 bd 4e e1 d2 99 02 22 da ||.....x..N....".| 00000040 6a bf 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |j.e1:q9:get_peer| 00000050 73 31 3a 74 32 3a ba cd 31 3a 76 34 3a 4c 54 01 |s1:t2:..1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a fa b8 7c cd |d1:ad2:id20:..|.| 00000010 21 53 36 fa 86 2f e1 73 c3 59 93 57 bc 02 e3 ce |!S6../.s.Y.W....| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a fa b8 |9:info_hash20:..| 00000030 78 13 05 d3 4c 4b 78 d0 9c 06 dc c8 1c 06 9d af |x...LKx.........| 00000040 03 f6 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |..e1:q9:get_peer| 00000050 73 31 3a 74 32 3a 14 b3 31 3a 76 34 3a 4c 54 01 |s1:t2:..1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 05 00 ff ff 00 fe fe fe fe fd fd fd fd 12 34 56 |..............4V| 00000010 78 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |x...............| 00000020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| ... 512 bytes shown in part
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a fa b8 7c cd |d1:ad2:id20:..|.| 00000010 21 53 36 fa 86 2f e1 73 c3 59 93 57 bc 02 e3 ce |!S6../.s.Y.W....| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a fa b8 |9:info_hash20:..| 00000030 78 7e f2 61 7d bf 84 8a d1 a5 c9 96 f2 36 cf 1b |x~.a}........6..| 00000040 63 0d 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |c.e1:q9:get_peer| 00000050 73 31 3a 74 32 3a ad 38 31 3a 76 34 3a 4c 54 01 |s1:t2:.81:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|
payload bytes
00000000 64 31 3a 61 64 32 3a 69 64 32 30 3a fa b8 7c cd |d1:ad2:id20:..|.| 00000010 21 53 36 fa 86 2f e1 73 c3 59 93 57 bc 02 e3 ce |!S6../.s.Y.W....| 00000020 39 3a 69 6e 66 6f 5f 68 61 73 68 32 30 3a fa b8 |9:info_hash20:..| 00000030 79 c6 07 b6 b7 04 aa 6d 37 cf 64 c8 75 e4 c4 f5 |y......m7.d.u...| 00000040 cd bd 65 31 3a 71 39 3a 67 65 74 5f 70 65 65 72 |..e1:q9:get_peer| 00000050 73 31 3a 74 32 3a e5 f2 31 3a 76 34 3a 4c 54 01 |s1:t2:..1:v4:LT.| 00000060 2f 31 3a 79 31 3a 71 65 |/1:y1:qe|